• RiskTDR

Risk Description

We have identified two plausible causes to why the DOMS may not obtain a Trusted Digital Repository (TDR) certification. The most probable cause is that no institution will be ready with a certification framework by the time the DOMS is ready, as no such framework currently exists and the institutions, such as DPE, that are working on it are only making slow progress.

The second reason why it is uncertain whether the DOMS can get a TDR certification is due to uncertainties regarding the DOMS design and the future production environment that the DOMS will be living in. So far we have identified these uncertainties:

• The quality of the technical implementation of bit preservation provided by the IT department may not meet the requirements for a TDR certification.
• The organisational procedures applied in the production environment, which the DOMS will be living in, may not meet the requirements for a TDR certification. An example of a procedure that may cause problems could be the way the back-ups are handled.
• The DOMS project may also end up having a problem with the design regarding achieving a TDR certification. The reason is that we plan to adopt the access and rights control framework from the AAI project and if it turns out that it does not meet the requirements for obtaining a TDR certification then we have a problem.

When to react?

Unfortunately, it is probably not possible for us to realise these problems until we are at the end of the DOMS project, or at least very close to the end. However, we must keep an eye on the DPE project and the trends regarding definition of a TDR to see if there is anything we can do to mitigate this risk.

Reaction

The question on whether DOMS can obtain a TDR certification is crucial to the long-term goal of this project, however, in the beginning we can live with the risk that it cannot obtain a TDR certification. We need the DOMS no matter what, but we must keep an eye on the trends and the progress of the DPE project to see if there is anything we can do to mitigate or eliminate this risk.

Responsible Persons

The below persons are responsible for continuously monitoring and acting on this risk: